When you receive an error within AlienVault, "Some assets belongs to one or more policies" you likely were trying to delete an asset!
Navigate to your AlienVault policies: /ossim/#configuration/threat_intelligence/policy
Configuration > Threat Intelligence > Policy
Within the list of policies, you may find your asset's hostname in destination/source.
You must double click on each policy with your hostname.
Now select the "Source" and "Destination" lists to remove your asset's hostname by selecting it and clicking the [X] button (blue).
Click "Update Policy" at the bottom.
Once all policies are removed for the host, you will be able to delete the asset!
1 assets have been permanently deleted from AlienVault...
Navigate to your AlienVault policies: /ossim/#configuration/threat_intelligence/policy
Configuration > Threat Intelligence > Policy
Within the list of policies, you may find your asset's hostname in destination/source.
You must double click on each policy with your hostname.
Now select the "Source" and "Destination" lists to remove your asset's hostname by selecting it and clicking the [X] button (blue).
Click "Update Policy" at the bottom.
Once all policies are removed for the host, you will be able to delete the asset!
1 assets have been permanently deleted from AlienVault...
